Unrated severityNVD Advisory· Published Mar 20, 2023· Updated Feb 26, 2025
WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect
CVE-2023-0876
Description
The WP Meta SEO WordPress plugin before 4.5.3 does not authorize several ajax actions, allowing low-privilege users to make updates to certain data and leading to an arbitrary redirect vulnerability.
Affected products
1- Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- wpscan.com/vulnerability/1a8c97f9-98fa-4e29-b7f7-bb9abe0c42eamitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.